ringcentral.com

Checked 22 October 2026, 10:31 UTC · via 8.8.8.8
!Passed with warnings
24 passed 2 warnings 0 failed 5 info

Registration

info

.com generic · MarkMonitor Inc. · expires 2027-05-06

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
MarkMonitor Inc.
Registered
6 May 1999
Last changed
4 April 2026
Expires
6 May 2027
Status
client delete prohibited, client transfer prohibited, client update prohibited
Registry nameservers
alfred.ns.cloudflare.com, deb.ns.cloudflare.com
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2027-05-06 #3
    The registration is valid until 2027-05-06 (196 days).
  • ✓ Transfer locked #4
    Registry status: client delete prohibited, client transfer prohibited, client update prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

info

alfred.ns.cloudflare.com, deb.ns.cloudflare.com

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
alfred.ns.cloudflare.com, deb.ns.cloudflare.com
NS in the zone
alfred.ns.cloudflare.com, deb.ns.cloudflare.com
NameserverAddressesNetwork (AS)Glue
alfred.ns.cloudflare.com162.159.44.131 108.162.195.131 172.64.35.131 2803:f800:50::6ca2:c383 2606:4700:58::a29f:2c83 2a06:98c1:50::ac40:2383AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US108.162.195.131 162.159.44.131 172.64.35.131 2606:4700:58::a29f:2c83 2803:f800:50::6ca2:c383 2a06:98c1:50::ac40:2383
deb.ns.cloudflare.com172.64.32.92 173.245.58.92 108.162.192.92 2803:f800:50::6ca2:c05c 2a06:98c1:50::ac40:205c 2606:4700:50::adf5:3a5cAS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US AS13335 CLOUDFLARENET - Cloudflare, Inc., US108.162.192.92 172.64.32.92 173.245.58.92 2606:4700:50::adf5:3a5c 2803:f800:50::6ca2:c05c 2a06:98c1:50::ac40:205c

Checks

  • i
    2 nameservers
    Two nameservers meet the minimum; RFC 2182 recommends three or more for important zones: alfred.ns.cloudflare.com, deb.ns.cloudflare.com.
    #6
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 6 IPv4 /24s and 4 IPv6 /48s.
  • i
    All nameservers in one AS
    All nameserver addresses are announced by one network operator (AS13335 (CLOUDFLARENET - Cloudflare, Inc., US): 12 addresses). An outage or attack on that network affects all nameservers; large anycast providers mitigate this, but a secondary DNS provider adds independence.
    #11
  • i
    All nameserver names under .com
    All nameserver names are under one TLD, so a problem with that TLD also makes the nameservers unreachable. Some operators use names under two TLDs for extra resilience.
    #12
  • ✓ All reachable over IPv6 #13
    Every nameserver has an IPv6 address.

Nameservers

warn

12 of 12 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
alfred.ns.cloudflare.com 162.159.44.131NOERROR, 32 ms, authoritativenoyes / yesrefused2026.10.2
alfred.ns.cloudflare.com 108.162.195.131NOERROR, 5 ms, authoritativenoyes / yesrefused2026.10.2
alfred.ns.cloudflare.com 172.64.35.131NOERROR, 6 ms, authoritativenoyes / yesrefused2026.10.2
alfred.ns.cloudflare.com 2803:f800:50::6ca2:c383NOERROR, 11 ms, authoritativenoyes / yesrefused2026.10.2
alfred.ns.cloudflare.com 2606:4700:58::a29f:2c83NOERROR, 10 ms, authoritativenoyes / yesrefused2026.10.2
alfred.ns.cloudflare.com 2a06:98c1:50::ac40:2383NOERROR, 10 ms, authoritativenoyes / yesrefused2026.10.2
deb.ns.cloudflare.com 172.64.32.92NOERROR, 4 ms, authoritativenoyes / yesrefused2026.10.2
deb.ns.cloudflare.com 173.245.58.92NOERROR, 4 ms, authoritativenoyes / yesrefused2026.10.2
deb.ns.cloudflare.com 108.162.192.92NOERROR, 4 ms, authoritativenoyes / yesrefused2026.10.2
deb.ns.cloudflare.com 2803:f800:50::6ca2:c05cNOERROR, 5 ms, authoritativenoyes / yesrefused2026.10.2
deb.ns.cloudflare.com 2a06:98c1:50::ac40:205cNOERROR, 5 ms, authoritativenoyes / yesrefused2026.10.2
deb.ns.cloudflare.com 2606:4700:50::adf5:3a5cNOERROR, 5 ms, authoritativenoyes / yesrefused2026.10.2

Checks

  • ✓ All respond #14
    All 12 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • !
    Software version disclosed
    These nameservers report their software version via version.bind/version.server, which helps attackers find known vulnerabilities: alfred.ns.cloudflare.com: "2026.10.2"; deb.ns.cloudflare.com: "2026.10.2". Hide or replace the version string.
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

pass

serial 2418044949 · primary alfred.ns.cloudflare.com

Found

Primary (MNAME)
alfred.ns.cloudflare.com
Contact (RNAME)
dns.cloudflare.com
Serial
2418044949
Refresh / retry
10000 s / 2400 s
Expire
604800 s
Negative TTL
1800 s

Serial per nameserver

NameserverSerial
alfred.ns.cloudflare.com (162.159.44.131)2418044949
alfred.ns.cloudflare.com (108.162.195.131)2418044949
alfred.ns.cloudflare.com (172.64.35.131)2418044949
alfred.ns.cloudflare.com (2803:f800:50::6ca2:c383)2418044949
alfred.ns.cloudflare.com (2606:4700:58::a29f:2c83)2418044949
alfred.ns.cloudflare.com (2a06:98c1:50::ac40:2383)2418044949
deb.ns.cloudflare.com (172.64.32.92)2418044949
deb.ns.cloudflare.com (173.245.58.92)2418044949
deb.ns.cloudflare.com (108.162.192.92)2418044949
deb.ns.cloudflare.com (2803:f800:50::6ca2:c05c)2418044949
deb.ns.cloudflare.com (2a06:98c1:50::ac40:205c)2418044949
deb.ns.cloudflare.com (2606:4700:50::adf5:3a5c)2418044949

Checks

  • ✓ Serial 2418044949 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 2h46m40s, retry 40m, expire 7d, negative TTL 30m.
  • ✓ Primary is a public nameserver #24
    The primary nameserver alfred.ns.cloudflare.com is one of the listed nameservers.
  • ✓ Contact dns@cloudflare.com #25
    The SOA RNAME dns.cloudflare.com means dns@cloudflare.com.
  • ✓ Timestamp serial #26
    The serial 2418044949 is a Unix timestamp (2046-08-16 15:09 UTC).

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

info

89 records at the apex

Found

Read from
162.159.44.131:53
TypeValueTTL
SOAalfred.ns.cloudflare.com. dns.cloudflare.com. 2418044949 10000 2400 604800 18001800
NSalfred.ns.cloudflare.com.86400
NSdeb.ns.cloudflare.com.86400
A66.81.247.6300
A66.81.247.250300
MX10 mxa-002b2c01.gslb.pphosted.com.14400
MX10 mxb-002b2c01.gslb.pphosted.com.14400
TXT"3cq3dbei3vgppa7i9lqbtf2oqn"300
TXT"MS=ms83132766"300
TXT"ZAC0799"300
TXT"_0cnt0mf162ioczms9hwl36tivswyv2u"300
TXT"_0dovptudz68cjrevjkq0ejupe6qrp5y"300
TXT"_2hxmjm9fum1mm3zpvad9hicgsi1av2d"300
TXT"_2ybqhtw1y9vowj5boipuvxhf82xve5n"300
TXT"_7fz2znopuwy8jb9v8mrgg1vodablt4i"300
TXT"_7kcrzqwo5sx1cvi7ebey2rnz6gqczrc"300
TXT"_7n8ed9vhz1lh04hi4ibzhhrhvgt14us"300
TXT"_7z9reciqnixrlgcxm7l6yx2lkr7gpw7"300
TXT"_856wkqnd04y9ull1wheq1hg8bdajluc"300
TXT"_9467u9qvt137mqc3n1jmh05yobevah6"300
TXT"_apkfkupho4o8zhx03c2872boa1ibzxa"300
TXT"_biysb015bvr97derhb8406vycnjfb3y"300
TXT"_bl7ojsogo59403cehg973d5xswbmc38"300
TXT"_dapyfaxr1libz8gpjcrfcw03cblcsfs"300
TXT"_f18yr1ww36caijp6r6ua0j5pkn7gjgr"300
TXT"_f5g0ht3llp04kzwv1vpjns6nz75092w"300
TXT"_globalsign-domain-verification=8PcxuCEFlTD6Zqx-tzEDLDlx4ZBwCe8DWOp3gmn8tl"300
TXT"_globalsign-domain-verification=ki2ojh9scrZL2Aos_I8zzyMVe95ltpIF-myilhaceA"300
TXT"_gx0k1zzycfw96al1q896kay6kpo6jlv"300
TXT"_ivz7php7ajrmml3rql4wvfqw3l19qk2"300
TXT"_kaebaobv9zaszy9wm9aodhmkft5vcet"300
TXT"_ks22ojzmqymzr2oij12sso8xe8hfzuk"300
TXT"_lqke7d5fg2al2q0kw6ad3i7cn9or04r"300
TXT"_n2cpi6msoufqbqazurgzxy6jfykgldb"300
TXT"_nj6tp0o8w2iczsd08aanzovand45jcc"300
TXT"_q3lb2my7s2fsbii641b4km2k54liity"300
TXT"_qc0pliqo2oo2ks93ic8tx1femjv6grv"300
TXT"_qq2qcxi2wzhlh1v9z73lt6b45d5ggjf"300
TXT"_rzj2h42sn35bss29zdn1nvkxu2sl5wn"300
TXT"_s6nppp1tlel1r22aeup2vf3jcfiyrtr"300
TXT"_saml-domain-challenge.5948a5c5-4b30-4465-a3f2-2136ea53ea0a.2dc355b1-b6e3-4409-956f-c5f6d487fb37.ringcentral.com=938e00b3-8214-4858-8b6f-34374a9dd3c5"300
TXT"_shz7ks914d4oo4pu589qpmaepthdle7"300
TXT"_tmnggoemige02yhst8wvvfsij6v5kdc"300
TXT"_tzy0tqarkow1kqduau49fb8yc0i22qe"300
TXT"_v1q836sot5qg3ybyb6hyocowmyfp9vm"300
TXT"_xtri8ijo7d3xxvjou2iu10gla0zmgii"300
TXT"_zc5x95a94o6mormxl7c69udlvfmb32z"300
TXT"adobe-idp-site-verification=691a6646502a53b1051bb93d20268d0c9cf273f8ae22319cf94127d93cef3d8b"300
TXT"anthropic-domain-verification-nfdpr8=8DRJcYAJPSKejkQfgZ21cIy1Z"300
TXT"apple-domain-verification=5u4ARaNk0j1ZhhhK"300
TXT"astro-domain-verification=cmgzqt0711ecr01ldkgxq9zzj"300
TXT"atlassian-domain-verification=Esq8tzu6nmRbe7GdgIT2Fyz29pc2JwQCcRzLtczCa7Dl3eYeJBVbeaRpnMEljJvo"300
TXT"boon-domain-verification-fvs3an=XqbOtqCZMfXlPPWeW0z9R7Uqw"300
TXT"boon-domain-verification-zjgcsz=9GDvFk2Q0Gg58UleRyfY9E3tT"300
TXT"canva-site-verification=fZX56uiZeBonRGXMIcz5jg"300
TXT"cursor-domain-verification-f9fzxe=nFbFAevbeviH2Z67BiK73pTEa"300
TXT"docusign=605bce8b-d4ed-4972-b611-a6b08454593c"300
TXT"docusign=f7cd7799-31f3-4c42-995a-1eacbe430d3e"300
TXT"domain-verification=8d6b1494eb6bf13689e7ff62437283c6fed7de5cb5c2261164feb7b292fad71f"300
TXT"drift-domain-verification=6ca3a5f924e36e7c16b9aacb9e106bc3f8df6e334aca79657c82d8eb29a5559d"300
TXT"elevenlabs=naOghkkaty8OnGy7Jk3izncujo16eYyXGtbqKo7IDGY"300
TXT"facebook-domain-verification=ebwc52j99vb8zlw5xp6j9zaa07dwh2"300
TXT"google-site-verification=NpRHi91X2FSJWrqRyb1Yh9HOgySmsheoLtMvOvVU-UY"300
TXT"google-site-verification=ancWsGJjyxMqWLpWxxoC2koyZuGCVQ-un1rzx8cWCSU"300
TXT"google-site-verification=cR3N5wpGKHIiEFc5A63cH1bQQOpLgIdT5miQb_oxSGI"300
TXT"google-site-verification=xGgM2LNwi7JixJ3LqSc91ewi9VeBAsrJey1OqZ6ONxg"300
TXT"hubspot-developer-verification=MTYwYjZlZGQtZjU0OC00ODQ4LTlmYTAtMTEzZWRmOTcyMjIz"300
TXT"hubspot-developer-verification=MzFhOGExYWMtODM3Ni00YTllLWJlZDUtMjU1ODM0Njk5NWJh"300
TXT"hubspot-developer-verification=NjhiZmFlNTMtYzc2Zi00OWI1LWFiZjUtNzM0OTkzODkxYTc0"300
TXT"hubspot-developer-verification=Y2I5YzRjNWYtMTE3MC00MjQwLTg2NWEtZThkMjAyMjRjODIz"300
TXT"hubspot-developer-verification=ZDIxMjg5NzAtMzllYy00YWNjLWEzZjUtNTU0NjZhMzgyMDlj"300
TXT"hubspot-developer-verification=ZTk5ZDRkMDUtMTFjZS00ZDUwLWFlZWEtN2MzNWQzOTAxMDZk"300
TXT"jetbrains-domain-verification=7w2s3cveyrptldrty4l7ss8sq"300
TXT"kiro-site-verification=c2dd3843-0d10-4186-bab7-a0f1faf76868"300
TXT"manus-domain-verification-2qk8fn=OjPY7y6XLKsriNyoF4mdlJHJ0"300
TXT"manus-domain-verification-h732fm=k4KWPH1cCgHpAbMsrfJMuEUpS"300
TXT"miro-verification=b62b5b8ab4b68a99c4805951ac3d53941e607204"300
TXT"mixpanel-domain-verify=efddb8ee-68ec-4d10-9011-84ad13bd3691"300
TXT"onx=9c37d71d-8d17-45bd-b7a1-8516cc61e4b0"300
TXT"openai-domain-verification=dv-K6uddGJClJ3CqsurGRnAXTg2"300
TXT"openai-domain-verification=dv-Q8h7sYB7JKqRdzQN0YKMajeA"300
TXT"openai-domain-verification=dv-drIhwHQSLz8xjrLYm78gaeRm"300
TXT"pax8validate"300
TXT"pendo-domain-verification=7ce3b41a-67a0-4277-8fbc-52d8b8543ee5"300
TXT"ps-cd-verification=224c583e-0401-4b13-b455-abe38de1b320"300
TXT"r4159szn4b9msp6c6t8qj8fprbfgmwpk"300
TXT"segment-site-verification=Q8VoBdDzG0iYMg9og1CSE6ehinNc7gBe"300
TXT"stripe-verification=A051AC0B48B1E36062E736B67A19D3FF32993405805BB30D84D1553F42236FC8"300
TXT"v=spf1 a:mrsip1.ringcentral.com a:mrsip2.ringcentral.com include:spf.protection.outlook.com include:_spf.salesforce.com include:spf.mtasv.net include:%{ir}.%{v}.%{d}.spf.has.pphosted.com include:etrgmail.com -all"300

Checks

  • ✓ TTLs within range #32
    TTLs: A 5m, MX 4h, NS 1d. The NS TTL at the parent is 2d and in the zone 1d; resolvers may use either.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35